Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: xyUuPR2qWjMWEtGrP75ntKy05/h/ETgU6i6Cra96zN4=
Subject key identifier: F2:26:59:81:CB:7E:41:2C:9E:45:06:94:9E:86:D6:88:92:57:6A:43
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019D9C63A03B3F067A85A42E7478425159E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 04B4
Signing time: Fri 17 Apr 2026 17:01:07 +0000
Manifest this update: Fri 17 Apr 2026 17:01:07 +0000
Manifest next update: Sat 18 Apr 2026 17:01:07 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: SYVCDUqQLApXicTWOVYvtoddI7BioYo+b+DdytpzAV4=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:a0:3b:3f:06:7a:85:a4:2e:74:78:42:51:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Apr 17 17:01:07 2026 GMT
Not After : Apr 18 17:01:07 2026 GMT
Subject: CN=f2265981cb7e412c9e4506949e86d68892576a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:c7:53:84:01:22:dd:9f:5d:ac:1a:be:fc:
97:f8:1c:e2:70:96:9f:e5:d5:30:c8:e0:7c:87:f3:
6d:e1:78:ea:7b:8f:ed:5d:39:de:b9:37:23:e8:aa:
85:d0:27:c0:73:74:5f:fa:09:95:d2:8f:bb:d9:77:
86:30:d5:e6:9e:da:97:28:ca:10:f6:ab:07:31:68:
73:97:b3:46:e7:78:79:74:04:91:ae:c9:4e:7b:53:
99:5a:a4:72:0d:ea:86:73:68:8c:83:56:c4:2e:bb:
99:7d:11:a7:2e:aa:11:9a:e8:5e:d3:d3:df:45:6d:
07:7c:23:5b:7b:92:67:bb:9e:0d:e2:e6:f9:86:c8:
95:2e:d1:5b:89:b3:93:71:7e:db:95:33:17:39:d0:
e9:b8:85:a0:f4:16:3f:25:ec:27:97:4d:c0:42:42:
5c:97:b8:e8:43:d9:68:14:c1:b5:6a:b2:80:c5:c0:
8a:63:b2:0d:97:47:b7:10:9c:4a:9e:7d:86:39:8d:
21:14:12:71:12:ef:72:d7:0a:1c:83:36:8e:08:12:
46:2a:90:15:92:23:c7:8e:fc:52:1c:ca:22:68:24:
44:ca:34:7f:b6:c6:31:41:8a:06:8d:26:c6:8f:c5:
09:05:d3:cb:a2:7f:51:b1:6e:f4:c1:4b:70:0d:a5:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:59:81:CB:7E:41:2C:9E:45:06:94:9E:86:D6:88:92:57:6A:43
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b6:43:1c:a1:af:0d:d1:99:d7:a1:34:be:3b:07:1a:31:d6:
f5:5d:b9:46:d1:35:46:87:6e:d5:f4:e2:34:7a:51:c3:4e:d3:
cd:3a:c8:10:2f:6b:b0:6c:e0:97:52:f7:5e:41:f6:42:88:e1:
09:31:04:ae:e2:24:8c:8f:81:b8:ef:29:23:8c:6d:57:99:3a:
a0:3a:e7:a5:d6:3a:b6:e3:82:e3:94:b8:c2:66:9e:5d:11:f1:
81:5d:d9:bf:2f:60:60:76:b4:0e:82:ce:9b:90:8f:b0:e9:22:
6d:ed:b2:ca:7a:40:72:fd:8a:3f:66:1b:f8:54:80:8d:38:a2:
08:ba:7a:54:8a:4a:0f:59:0a:c4:e4:f9:8e:24:cf:b2:de:47:
db:10:52:5a:86:e5:c0:50:8c:19:8d:e5:ab:f9:06:b2:ab:8e:
78:8c:93:48:04:d1:8b:49:97:5a:25:32:10:4e:ec:5b:cc:9e:
b2:b4:d2:ae:a5:cb:d1:5d:9d:93:73:6c:26:94:e1:3a:da:a7:
da:a2:dd:3a:12:07:96:db:28:45:aa:b6:c4:1c:a8:f5:d8:d4:
ab:c7:06:7f:cf:ae:bd:43:76:58:a6:1a:f3:b0:99:49:41:dc:
a3:1c:f0:c6:b0:b7:98:20:60:88:a4:51:60:b5:5c:b4:1c:96:
d5:cf:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:57 2026 by rpki-client